←back to thread

20 points davidandgoli4th | 3 comments | | HN request time: 0s | source

Hey HN! I’m Lukas Dickie the founder of Changefly and I’m truly excited to share with you our latest release of Changefly ID with Anonymized Identity & Age Verification.

By putting privacy first and using a novel approach to account protection, Changefly ID offers a path to a safer, more secure, and less-intrusive internet for everyone:

- Changefly ID for anonymous authentication + ANONYMIZED identity & age verification for services that are required to verify minimum age

- Zero-knowledge proofs, secure multi-party computation, temporary unique identifiers

- Protects against bot attacks, bot scraping, identity theft, phishing, credential stuffing, online tracking, and other evolving threats

Changefly ID + Anonymized Identity & Age Verification is like showing a bartender a “Yes, I’m over 21” hologram badge instead of handing them your driver’s license with your name, address, and birthdate. They get what they need—but none of what they shouldn’t have.

We’re just getting started and I’d love to hear what you think, what you’d like to see next, and any feedback you have.

https://changefly.com

Show context
vorejdajo ◴[] No.44980171[source]
The linked article seems purposely vague so much so that I'm wondering if you're a scam. It just has some privacy keywords like "zero knowledge proofs", but it doesn't really explain what's going on. Diving deep into your privacy policy, to know how it works - shows you use third party for the initial verification?

>For example, our Third-Party Providers may verify your government ID when you register for Changefly Anonymized Identity Protection[1]

[1]: https://www.changefly.com/policies/privacy-policy

replies(1): >>44990527 #
1. davidandgoli4th ◴[] No.44990527[source]
Hey vorejdajo, I completely understand your questioning if this is a scam (Changefly actually blocks scammers). My name is Lukas Dickie and I'm the founder of Changefly. You can verify this by looking up our business registration with Washington State or contacting Troy Foster at Perkins Coie (https://perkinscoie.com/professionals/troy-foster). I have a long track record of working with governments and companies around the world.

For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.

I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:

Changefly Anonymous Authentication FAQ: https://www.changefly.com/security

Changefly ID white paper: https://www.changefly.com/our-research

Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en

replies(1): >>44998677 #
2. vorejdajo ◴[] No.44998677[source]
>For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.

This important information is not in your FAQ or your white paper. Not even a mention of identity verfication. Transparency is crucial, if you want trust.

Nevertheless, Am I not parting more of my data by giving Govt id to another third party(stripe) rather than just my email?

replies(1): >>45006261 #
3. davidandgoli4th ◴[] No.45006261[source]
Hi vorejdajo, thanks for the feedback. We've been in private mode, and recently launched access to the general public. Additional info will be added to our website and Developer API guide.

"Nevertheless, Am I not parting more of my data by giving Govt id to another third party(stripe) rather than just my email?"

- Identity verification is OPTIONAL for Changefly ID. We chose to work with Stripe for government ID verifications because we can guarantee that after the verification and anonymization, your PII is verifiably deleted.

- Regarding using your email for logins and identity verification, that is no longer feasible in this day and age due to phishing, credential stuffing, account takeovers, scams, and the list goes on.